fema.gov DNSSEC Outage: 2018-11-27

Date: November 27, 2018

Overview

This page gives some details on the fema.gov DNSSEC outage on November 27, 2018. Simultaneously there were related DNSSEC outages affecting ready.gov, readybusiness.gov, floodsmart.gov, and disasterassistance.gov.

Timeline / DNSViz

2018-11-27 01:25:05 UTC — No RRSIGs
2018-11-28 15:57:01 UTC — DNSSEC unsigned: DNSSEC outage over

DNSSEC Debugger

Unlike DNSViz, Verisign's DNSSEC Debugger doesn't archive results, so here's a screenshot of my web browser's output from November 27, 2018:

November 27, 2018 fema.gov DNSSEC outage

Zonemaster

Note: Zonemaster requires javascript.

zonemaster.labs.nic.cz archived "No DNSKEYs were returned."
zonemaster.net archived "No DNSKEYs were returned."
zonemaster.fr archived "No DNSKEYs were returned."

Logfile examples

[1543281524] unbound[14321:0] info: validation failure <fema.gov. A IN>: No DNSKEY record from 69.36.145.33 for key fema.gov. while building chain of trust
[1543295160] unbound[14321:0] info: validation failure <fema.gov. A IN>: No DNSKEY record from 209.112.113.33 for key fema.gov. while building chain of trust